Skip to content
Merged
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 9 additions & 5 deletions draft-ietf-httpbis-unencoded-digest.md
Original file line number Diff line number Diff line change
Expand Up @@ -236,11 +236,15 @@ needs to decode all encodings in order before validation.

Since the digest is calculated on unencoded representation bytes, validation of
a message with content codings (as described above) can only succeed where the
decoded output produces the same byte sequence as the input. While many
registered content codings behave this way, there is no requirement for them to
do so and it remains a possibility that decoding could produce a
different byte sequence. In order to avoid unintended validation failures, care
is advised when selecting content codings for use with `Unencoded-Digest`.
decoded output produces the same byte sequence as the input. While {{Section
8.4.1 of !HTTP=RFC9110}} describes content codings to operate "without loss of
information", that doesn't necessarily mean a byte-for-byte equivalence. It's
entirely possible for content codings to perform semantically-meaningless
transformations that nevertheless result in a decoded byte sequence that does
not exactly match the original unencoded representation. In order to avoid
unintended validation failures, care is advised when selecting content codings
for use with `Unencoded-Digest`; many registered content codings do provide
byte-for-byte equivalence and are appropriate.


# Integrity Fields are Complementary
Expand Down